NDIS Virtual Network Adapter Enumerator in Windows 11: Fix Code 22 or 52

NDIS Virtual Network Adapter Enumerator is a Microsoft system-device entry associated with NdisVirtualBus / ROOT\NDISVIRTUALBUS. Its presence alone is not an error. If Device Manager shows a warning, read the exact Device status first: Code 22 means the device is disabled, while Code 52 means Windows cannot verify the required driver's digital signature. Those are different failures and should not get the same fix.

Windows 11 · NDISCode 22 · Code 52Last reviewed Sep 26, 2026
🎯 This guide matches when:
Device Manager shows “NDIS Virtual Network Adapter Enumerator,” NdisVirtualBus, or ROOT\NDISVIRTUALBUS.Device status says “This device is disabled. (Code 22)” or reports Code 52.You want to avoid deleting a Microsoft system device or weakening driver-signature security without proving the cause.
Match the Device Manager code first
No warning / device works normallyStop. Presence of the enumerator alone is not a troubleshooting target.
Code 22The device is disabled. Use the enable path and verify the status afterward.
Code 52Windows cannot verify the required driver's digital signature. Use the signature/driver-integrity path.
Another Device Manager codePreserve that exact code and use its specific diagnosis; do not force the Code 22/52 fixes.
Difficulty: Easy–ModerateRisk: Read-only checks first
🔎 Quick Check — read Device status before changing anything

Open the NDIS Virtual Network Adapter Enumerator properties and record the complete Device status message.

Device Manager → System devices → NDIS Virtual Network Adapter Enumerator → Properties → General

Verify: Continue only with the branch matching the exact code. If Windows reports normal operation and you have no networking symptom, no repair is indicated by this entry alone.

ADSENSE · reserved slot after the first useful step

What NDIS Virtual Network Adapter Enumerator is—and what the name does not prove

Windows inventories identify this Microsoft system device as NdisVirtualBus, commonly with the instance ID ROOT\NdisVirtualBus\0000 and Microsoft INF ndisvirtualbus.inf. Microsoft documentation also describes NDIS as supporting enumeration of network miniport adapters and virtual connections.

That does not make this entry a physical Wi-Fi or Ethernet adapter, and its presence does not by itself prove Hyper-V is active, malware is installed, or your network is broken. Diagnose the status code and the actual network symptom separately.

Fix path #1 — Code 22: enable the device

Microsoft defines Device Manager Code 22 as “This device is disabled.” Its recommended resolution is to enable the device. If you did not intentionally disable NDIS Virtual Network Adapter Enumerator, use Enable device rather than uninstalling system components.

Device Manager → NDIS Virtual Network Adapter Enumerator → Enable device

Verify: Reopen Properties → Device status. Code 22 should be gone. Then test the network function that was actually failing. Do not claim success merely because the warning icon disappeared if your original network symptom remains.

Fix path #2 — Code 52: treat it as a signature/driver problem

Microsoft defines Code 52 as Windows being unable to verify the digital signature for the driver required by the device. Microsoft lists an unsigned or corrupted driver as possible causes and recommends obtaining a current properly signed driver rather than bypassing signature enforcement.

For this Microsoft system-device entry, first record your Windows edition/build and whether Code 52 appeared after an update, rollback, image modification, driver package, or other system change. If Code 52 appeared immediately after one of those changes, treat the timing as evidence to investigate—not proof that the change caused it. Before changing the driver, open Properties → Driver and record the Driver Provider, Driver Date, and Driver Version. Run Windows Update and restart before considering more invasive repair. If the problem persists, preserve the exact status and system context for Microsoft/OEM support or a Windows component-integrity diagnosis.

🟡 Security guardrail: Do not permanently disable driver-signature enforcement just to make Code 52 disappear. Removing the check can hide the symptom without establishing why Windows rejected the driver.

Verify: After the supported update/repair path and restart, confirm that Device Manager no longer reports Code 52 and that the affected network behavior works. If Code 52 remains, stop repeating driver toggles and capture evidence.

If you see a different Device Manager code

Code 22 and Code 52 are not interchangeable with Code 31, 32, 43, or other Device Manager statuses. Microsoft assigns different causes and resolutions to different codes. Use the exact code shown in Device status as the next diagnostic key.

Verify: Record the full message—not just the yellow warning icon—before applying another fix.

If networking is broken but the enumerator has no error

Do not make this system-device entry the root cause merely because its name contains “Network Adapter.” Check the adapter or feature that actually fails: Wi-Fi/Ethernet connection state, the relevant virtual adapter, VPN software, or the application using the network. A normal NDIS Virtual Network Adapter Enumerator status is evidence to move the investigation elsewhere.

What not to do first

Do not uninstall or delete NdisVirtualBus simply because you do not recognize the name.Do not assume Code 22 means the driver is corrupted; Microsoft defines it as a disabled device.Do not treat Code 52 wording as proof of malware; the message describes multiple possible causes.Do not permanently disable driver-signature enforcement as a shortcut for Code 52.Do not assume this entry proves Hyper-V is active or explains every Wi-Fi/Ethernet failure.

Still not fixed? Capture this evidence

Before escalating, record:the complete Device status message and codeWindows edition, version and OS buildthe device instance ID shown under Details → Device instance pathwhether the entry is enabled or was manually disabledwhat changed immediately before the warning appearedDriver Provider, Driver Date, and Driver Version from Properties → Driverthe actual network symptom, if any, and which physical/virtual adapter is affectedwhether Windows Update and a normal restart changed the status

References

Still stuck? Ask the community

Share the exact Device status/code, Windows version/build, device instance ID, what changed before the warning, and the network symptom you are trying to solve.

Keep it safe: never post passwords, private hostnames/IPs, access tokens, certificate private keys, or confidential logs.
Powered by GitHub DiscussionsSign in with GitHub to comment. Reading comments does not require sign-in.

Loading community discussion…